Infomach's SOC as a Service offers a complete solution for continuous monitoring and management of information security, eliminating the need for investments in proprietary infrastructure and hiring specialized staff.

12-month contract. Contract with 50% penalty. We do not charge for implementation.

Main Components

• Multidisciplinary team with certified analysts and engineers specialized in incident response;
• Structured processes based on international frameworks (NIST, MITRE ATT&CK); documented procedures for incident response; optimized workflows for triage and analysis; continuous improvement processes;
• Advanced SIEM, SOAR, Threat Intelligence, and Artificial Intelligence technologies.

AWS Cloud Infrastructure

• Our SOC environment operates in the AWS cloud, designed for scalability, high availability, and redundancy, with the following features;
• Deployment in multiple Availability Zones (AZs);
• Use of redundant services such as EC2 Multi-AZ, ALB with failover, and S3 with optional cross-region replication;
• Continuous monitoring of infrastructure and recovery mechanisms via Terraform;
• Continuous backup with AWS Backup, stored in different regions, ensuring rapid recovery in case of failures.

SOC Continuity and Redundancy Plans

• The continuity of SOC operations is ensured by contingency plans, which include DRP (Disaster Recovery Plan) for critical systems, such as SIEM and Orchestration and Response tools.

We maintain operational redundancy of the SOC on two levels

• Geographical: We have SOC structures in AWS with the possibility of activating them in different regions;
• Operational: Teams work in a distributed manner, with synchronized shifts and secure access via VPN and MFA, which allows for service continuity even in the event of a unit or team becoming unavailable.

Differentials

Arsenal of tools and modules included: SIEM, SOAR, XDR, UEBA, threat intelligence, deep and dark web monitoring, vulnerability management. Private and Isolated AI: AI improves the handling of alerts and analyses, offering quick and accurate insights.

Scope of Service

The customer informs us of the equipment in the environment they wish to monitor.

Expected Results

Continuous 24x7x365 monitoring: Uninterrupted protection without the need for internal staff; Rapid incident response: Minimization of detection and containment time; Complete visibility: Customized dashboards and reports; Reduced complexity: Unified security management.

Deliverables

24x7x365 monitoring; Periodic reports; Follow-up meetings; Continuous improvement.

Delivery Format

Elixguard Platform (SIEM/SOAR/Threat Intelligence/AI); Development of integrations with the technologies listed above; Continuous 24x7x365 monitoring of alerts and anomalous events in real time;

Target Audience

• Companies that need more mature security processes.
• Small, medium, and large companies that use technology as a means for their business to generate revenue.

Common challenges we address

Customers who do not know how to justify hiring a SOC. In this case, we ask them how much it costs to have their business shut down for one day.

Plan details

• The client will receive a spreadsheet where they will include the assets of their network that they want to monitor.
• Through this information, it will be possible to account for costs with the Elixguard platform, Cloud costs, and personnel costs.

Guarantees

After signing up, the customer will go through an implementation process, where the Elixguard platform will be activated and integrated with their previously reported devices and applications. At this point, it is essential that the customer be present during the stages, as this will be crucial for faster and more efficient implementation.